The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface control of Netgear SRX5308 integrated software lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request using the “ntp.server1...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43020)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from incorrect manipulation of the parameter ntp.server1. The vulnerability can be exploited by an attacker to obtain sensitive information such as...

CVE-2023-2390: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ntp.server1 leads to cross site...

PT-2023-2602 · NetGear · Netgear Srx5308

Name of the Vulnerable Software and Affected Versions: Netgear SRX5308 versions up to 4.3.5-3 Description: A vulnerability has been found in the Web Management Interface of Netgear SRX5308, affecting unknown code of the file scgi-bin/platform.cgi?page=time zone.htm. The manipulation of the...